← All roles

Principal Software Engineer (Java) - Security - Elasticsearch

Elastic· Platform - Elasticsearch
Apply on company site
Hybrid (United Kingdom)Posted 2w ago

About the role

Principal Software Engineer leading architecture and design of Elasticsearch Security features (authentication, authorization, and tenant isolation), focusing on high-performance security at scale in a distributed data store.

Responsibilities

  • Own core security initiatives from architecture to production, leading technical design, plan, and execution for major security components inside the Elasticsearch core engine.
  • Develop foundational security models for intricate features.
  • Optimize security performance at scale in distributed systems environments.
  • Apply cryptographic solutions to address genuine customer use cases.
  • Ensure robust data isolation within shared infrastructure supporting disparate customers.
  • Monitor and apply latest advancements in security (authentication, identity management, cryptography, data access management).
  • Collaborate with peers across the company to embed security into new customer features from the outset.
  • Drive vulnerability management with the InfoSec team to identify, assess, and remediate security risks.
  • Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
  • Mentor and coach other engineers, fostering technical excellence and security-first development.

Qualifications

  • Deep knowledge of Java internals and JVM memory management; ability to write high-performance, thread-safe, and lock-free code; experience with large open-source and enterprise codebases.
  • Proven experience designing and building scalable authorization systems, including RBAC/ABAC models, token validation pipelines, permission compilation, and distributed cache invalidation strategies.
  • Solid understanding of distributed systems security (node-to-node mutual trust, zero-trust transport, partition tolerance, cluster state propagation).
  • Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
  • Proven track record of using AI to accelerate development, debugging, and optimization while owning final outcomes.
  • Ability to collaborate across functions and transition between projects, codebases, or teams based on priorities.
  • Ability to work autonomously, drive decisions, and lead a distributed team with asynchronous, direct, and transparent communication.

Skills

Required:Java and JVM internalsAuthorization systems designDistributed systems securityOAuth 2.0 / SAML
Nice to have:AI in development

Benefits

  • Competitive pay based on work performed
  • Health coverage for you and your family in many locations
  • Flexible locations and schedules for many roles
  • Generous vacation days
  • Company match up to $2000 for charitable donations (local currency equivalent)
  • Up to 40 hours per year for volunteer projects
  • Minimum 16 weeks of parental leave
Last updated Oct 8, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic